Most recent entries from all

certfr-2023-avi-0513 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Elles permettent à u…

certfr-2023-avi-0513

EUVD-2026-232400

fkie_cve-2022-45693

Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

GHSA-grr4-wv38-f68w — Jettison Out-of-bounds Write vulnerability

Affected: Maven: org.codehaus.jettison:jettison

Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

gsd-2022-45693

NCSC-2026-0034 — Kwetsbaarheden verholpen in Atlassian producten

NCSC-2026-0034

OESA-2023-1914 — jettison security update

Affected: openEuler:20.03-LTS-SP1: jettison, openEuler:20.03-LTS-SP3: jettison, openEuler:22.03-LTS: jettison, openEuler:22.03-LTS-SP1: jettison, openEuler:22.03-LTS-SP2: jettison

Jettison is a collection of Java APIs (like STaX and DOM) which read and write JSON. This allows nearly transparent enablement of JSON based web services in services frameworks like CXF or XML serialization frameworks like XStream. Security Fix(es): Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.(CVE-2022-40149) Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by Out of memory. This effect may support a denial of service attack.(CVE-2022-40150) A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data.(CVE-2022-45685) Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.(CVE-2022-45693)

openSUSE-SU-2024:12567-1 — jettison-1.5.3-1.1 on GA media

jettison-1.5.3-1.1 on GA media

RHSA-2023:0544 — Red Hat Security Advisory: Red Hat Camel for Spring Boot 3.14.5 Patch 1 release and security update

jettison: parser crash by stackoverflow jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos CXF: directory listing / code exfiltration CXF: SSRF Vulnerability

UBUNTU-CVE-2022-45693

Affected: Ubuntu:Pro:16.04:LTS: libjettison-java, Ubuntu:Pro:18.04:LTS: libjettison-java, Ubuntu:20.04:LTS: libjettison-java, Ubuntu:22.04:LTS: libjettison-java, Ubuntu:24.04:LTS: libjettison-java, Ubuntu:25.10: libjettison-java, Ubuntu:26.04:LTS: libjettison-java

Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

WID-SEC-W-2023-0239 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um beliebigen Programmcode auszuführen, ein Cross-Site-Scritping-Angriff durchzuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.